Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-37172 EUVD-2024-36478GHSA-4r5j-cg4f-m685

[CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

Published Jul 9, 2024 · Updated Aug 2, 2024 · Assigned by sap

Description

SAP S/4HANA Finance (Advanced Payment
Management) does not perform necessary authorization check for an authenticated
user, resulting in escalation of privileges. As a result, it has a low impact
to confidentiality and availability but there is no impact on the integrity.

Affected products

VendorProductAffectedFixed
SAP_SE SAP S/4HANA Finance (Advanced Payment Management) S4CORE 107, S4CORE 108 —

Advisories 1

References